# Payatu: pentest scope, pricing and delivery

Source: https://pentestcompare.com/providers/payatu/
Publisher: Excession Labs (pentestcompare.com)
Last updated: 2026-11-09

Payatu at a glance: what it tests, who does the testing, published prices, turnaround, retesting and sample reports. Sourced and dated.

Payatu is a Pune-headquartered security consultancy with research roots. It lists web, mobile, cloud, code review, IoT, AI/ML, OT/ICS and red team services, with three published web and API pentest tiers.
- Website: https://payatu.com/
- Type: Security consultancy
- Headquarters: India
- Services listed: web-app, mobile, cloud, code-review, iot, ai-llm, ot-ics, red-team
- Delivery: hybrid. The pricing page offers three tiers that pair an AI scan with validation by certified researchers (OSCP; OSCP/OSCE at Enterprise).
- Scope: Web apps yes; APIs yes; Cloud yes; Network yes; Mobile yes; AI apps yes
- Pricing model: mixed
  - AI-Native Express: $3,500 per test (starts from) (Web app and API; automated scan plus AI agent layer; High and Critical findings validated by a senior certified researcher; ASVS L1; 1 re-validation round for Critical and High.) https://payatu.com/pricing
  - AI-Led Expert: $5,000 per test (starts from) (Web and API (mobile on request); all Critical to Medium findings manually validated by OSCP researchers; ASVS L2; 1 re-validation round, all severities.) https://payatu.com/pricing
- Pricing note: Enterprise tier is by quote. Prices are starting prices for a fixed scope; the page says the quote is locked before work starts.
- Turnaround: Not published
- Retesting: Re-validation of fixes: 1 round (Express, Critical and High), 1 round (Expert, all severities), 2 rounds (Enterprise, all severities).
- Sample report: not published 
- Credentials: CERT-In empanelment (https://payatu.com/); ISO/IEC 17025 (testing laboratory accreditation) (https://payatu.com/); ISO/IEC 27001:2022 (https://payatu.com/); ISO 9001 (https://payatu.com/)
- Compliance mentioned: PCI DSS, GDPR, ISO 27001, CERT-In
Good fit when: Teams that want a published starting price for a web/API test with human validation, or product, IoT and OT testing, from an India-headquartered firm with CERT-In empanelment.
Tradeoffs: Prices cover web and API only; mobile and network are on request or in the quoted Enterprise tier. No sample report or turnaround is published. The homepage credentials are stated by Payatu without certificate links.
Last checked: 2026-11-09
Sources:
- Payatu homepage: https://payatu.com/ (checked 2026-11-09)
- Payatu pentest pricing: https://payatu.com/pricing (checked 2026-11-09)
- Payatu contact (offices, HQ): https://payatu.com/contact-us (checked 2026-11-09)
- About Payatu: https://payatu.com/about-us (checked 2026-11-09)